Security update: Metafields Guru and the October 2026 PHP and Node.js vulnerabilities
· 3 min read
On October 21, 2026, PHP and Node.js both released critical security fixes, and many merchants are now checking their app vendors. Here is where Metafields Guru stands: we don't use PHP, so the PHP vulnerabilities don't affect us, and all our servers were updated to the fixed Node.js release the same day. Metafields Guru is working as usual, and you don't need to do anything in your store.